Vice President Product Security

PTC is seeking aVice President – Global Product Security to define and lead the company’s product security strategy across its global portfolio. Reporting to the Chief Product Officer,theywill ensure security is embedded throughout the product lifecyclespanningarchitecture and development through release, deployment, and ongoing vulnerability management.

Youwill partner closely with Product, Engineering, Cloud Operations, Information Security, Legal, and Customer Success to strengthen product security, reduce risk, andmaintaincustomer trust. This leader must combine deep application securityexpertisewithjudgmentand influence toestablishconsistent standards across a complex global product organization.

Key Responsibilities

Product Security Strategy and Governance

• Define and execute a comprehensive product security strategy aligned with PTC’s product, cloud, and AI priorities.

• Establish security standards, policies, and governance across the product development lifecycle.

• Embed security into product architecture, engineering practices, release processes, and acquisition integration.

• Advisethe Chief Product Officer and executive leadership on product security risks, priorities, investments, and emerging threats.

• Establish clear metrics and reporting to measure product security posture, vulnerability trends, remediation performance, and organizational readiness.

Application Security

• Lead the company’s application security program across cloud, SaaS, on-premises, and connected products.

• Establish secure development standards based on recognized frameworks, including OWASP.

• Oversee application security testing using software composition analysis, static application security testing, dynamic application security testing, and related tools, including Black Duck.

• Partner with Engineering to incorporate security testing and automated controls into development and CI/CD workflows.

• Ensure vulnerabilities are consistentlyidentified, prioritized, remediated, andvalidatedbased on severity and customer risk.

• Guidesecurearchitecture reviews, threat modeling, code reviews, and security design decisions for new and existing products.

Vulnerability and Incident Management

• Lead PTC’s product penetration-testing strategy, including the selection and management of internal and external testing resources.

• Establish and oversee product vulnerability management and Product Security Incident Response Team processes.

• Define policies governing responsible disclosure, vulnerability intake, remediation timelines, customer communication, and the publication of Common Vulnerabilities and Exposures.

• Serve as the senior product security authority during significant vulnerabilities or product-related security incidents.

• Ensure clear coordinationamongProduct, Engineering, Information Security, Legal, Communications, and Customer Success during security events.

AI and Emerging Technology

• Assess how AI is changing application vulnerability discovery, security testing, attack methods, and remediation.

• Defineappropriate securitystandards and testing requirements for AI-enabled products and functionality.

• Evaluate opportunities to use AI to improve vulnerability detection, prioritization, and response.

• Anticipate emerging product security risks and translate them into practical product and engineering requirements.

Leadership and Partnership

• Build and lead a high-performing product security organization with theexpertiseand scalerequiredto support PTC’s portfolio.

• Create clear accountability for product security while strengthening security ownership within Product and Engineering.

• Partner with customer-facing teams to address product security requirements during strategic sales, renewals, and customer reviews.

• Represent PTC’s product security strategy with customers, partners, auditors, and other external stakeholders.

• Promote a culture in which security is treated as a core product requirement and an enabler of customer trust.

Qualifications

• 15+ years of progressive experience in product security, application security, software engineering security, or a related discipline, including 8+ years leading security teams and programs within a global technology company.

• Experience embedding security into modern software development and CI/CD processes.

• Ability to translate complex technical risks into clear business implications, priorities, and executive-level recommendations.

• Proven ability to influence senior product and engineering leaders and drive consistent standards across a global, matrixed organization.

• Strong judgment, credibility, and communication skills, particularly during high-risk security events.

• Bachelor’s degree in computer science, cybersecurity, engineering, or a related field;an advanceddegree or relevant security certifications are preferred.

Required Application Security Expertise

• Deep familiarity with OWASP standards, including the OWASP Top 10.

• Broadexpertiseacross application security testing tools and methodologies, including Black Duck, software composition analysis, static application security testing, and dynamic application security testing.

• Demonstrated experience leading and managing penetration-testing programs.

• Strong understanding of how AI is changing application vulnerability detection, testing, and remediation.

• Expertisein application security policies, including responsible disclosure, vulnerability management, remediation requirements, customer communication, and decisionsregardingwhen to publish CVEs.

PTC carefully considers a wide range of factors whendeterminingcompensation. Theanticipatedannual salary range for this position is between $272,000 - $340,000. The salary range reflects a good-faith estimate of compensation at the time of posting. 

Actual compensation may vary based on a candidate's skills, qualifications, experience, and location. Eligible employeesalso canbecomePTC shareholdersthrough our employee share purchase program (ESPP), whichallows for the purchase of discounted PTC stock. Certain roles may also be eligible for participation in our equity programs. Employees may be eligible for medical, dental and vision insurance, paid time off and sick leave, tuition reimbursement, 401(k) contributions and employer match, flexible spending accounts, life insurance, disability coverage and if you are an office-assigned employee, a generous commuter subsidy. All total rewards and benefits programs are subject to plan eligibility and other terms and conditions.  For more information about PTC’s comprehensive benefits, please visitourCareers Page.  Applications will be accepted on anon-goingbasis.